Moved entire login logic to handler.
Removed constructor dependencies; strives for better testing...